@agentcomms/events-daemon 0.17.0 → 0.18.1

package/README.md

@@ -27,7 +27,8 @@ agent-events run                     # in a terminal you keep open: the owner of
 cleanly on `agent-events stop` or when the terminal closes. There is no background service or autostart in this
 release; the desktop app will supervise it later. Its state lives in an owner-only directory. A state directory so
 deep that its control socket's path would pass the system limit (103 bytes on macOS, 107 on Linux) is refused, with
-a hint to pin a shorter one.
+a hint to pin a shorter one. `agent-events --version` (or `-V`) prints the installed daemon version; a subcommand's
+`--version <number>` continues to select an immutable rule, target, subscriber or judge version.
 
 ## A first rule: Gmail into the dry-run log
 
@@ -39,19 +40,23 @@ safe way to see what a rule would send before you point it at a webhook.
 agent-events target add '{"targetId":"log","version":1,"kind":"dry-run","retentionMs":86400000}'
 
 # 2. a rule: every received Gmail message with a subject, mapped to its subject only
-agent-events sources list          # the Gmail account ids you can name in a rule
+agent-events sources list          # every connected account a rule can name: its source, id and name
 agent-events rule create "$(cat rule.json)"
 
 # 3. turn it on: each step prints an approval, which you approve by typing its challenge
-agent-events rule enable mail-subjects 1
-agent-events approve <approval-id>
 agent-events enable-all            # the standing approval that starts collection
 agent-events approve <approval-id>
+agent-events rule enable mail-subjects 1
+agent-events approve <approval-id> # offers to test the target first; answering no is fine
 
-# 4. read what matched
+# 4. read what matched: the list gives each record's id, and show prints that record
 agent-events dryrun list
+agent-events dryrun show <record-id>
 ```
 
+Switch collection on before approving the rule: a pending target can be tested only while collection is on. If a test
+cannot run, the approval says why and still asks for its challenge.
+
 `rule.json`:
 
 ```json
@@ -112,8 +117,10 @@ approval preview then shows exactly what changes.
 
 ## Agents and approvals
 
-`agent-events mcp` serves the same operations to a coding agent over MCP. Register it with your client as you would
-any MCP server, with `npx -y @agentcomms/events-daemon mcp` as the command. The
+`agent-events mcp` serves the same operations to a coding agent over MCP. Register it through the core's managed
+installer — for example, `agentcomms mcp install --server events --client claude-code` — or call
+`comms_server_install` with `channel: "events"` from the core MCP server. The same preview-and-approval flow used for
+channel servers applies, and the result tells you to restart the client. The
 [`agentcomms-events` skill](../../skills/agentcomms-events/SKILL.md) tells an agent how to use it.
 
 - **An agent can:** read the catalogue and your rules, propose rules, targets, judges and a judge budget, test a rule
@@ -146,7 +153,9 @@ The third kind, **`laya`**, runs the Laya model inside the daemon. It is not ava
 list` shows it as unavailable, and a judge naming it is refused.
 
 **Every judge kind is off until you enable it, at your terminal.** Installing, updating, a rule or a budget never
-turns one on. To ask Jev about received mail:
+turns one on. Turning a kind off also cancels any pending global enablement that captured a rule of that kind. Removing
+a judge cancels its pending rule activations, and a rule that embeds that revoked judge cannot later become active. To
+ask Jev about received mail:
 
 ```bash
 # 1. turn the kind on: you approve its exact enablement at this terminal
@@ -243,7 +252,8 @@ address in `"approvedAddressSet": ["127.0.0.1"]`. It needs no key.
 calls, and the most input and output tokens per call. The daemon-wide budget caps every rule, overall and per
 provider, and a rule cannot raise it. A rule's new version inherits the charges of the versions before it, so a new
 version never resets a budget. `judge test` runs at most ten times an hour per judge version, charged to the overall
-budget.
+budget. A call is charged once it reaches the network: one refused, out of time or cut short before its first
+connection costs nothing, and a retry is a call of its own.
 
 **Turning a kind off.** `agent-events judge kind disable typesafe` takes effect at once: decisions waiting on its
 judges, and the deliveries, dry-run records and stream entries bound to them, are cancelled and purged. Rules that

package/THIRD_PARTY_LICENSES

@@ -8,7 +8,7 @@ Generated by scripts/third-party-licenses.mjs from the 4 packages the bundler pu
 
 
 ----------------------------------------------------------------------------------------------------
-@modelcontextprotocol/core@2.0.0 — MIT
+@modelcontextprotocol/core@2.3.1 — Apache-2.0
   https://modelcontextprotocol.io
 ----------------------------------------------------------------------------------------------------
 The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.
@@ -228,7 +228,7 @@ Documentation in this project (excluding specifications) is licensed under
 CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
 the full license text.
 ----------------------------------------------------------------------------------------------------
-@modelcontextprotocol/server@2.0.0 — MIT
+@modelcontextprotocol/server@2.3.1 — Apache-2.0
   https://modelcontextprotocol.io
 ----------------------------------------------------------------------------------------------------
 The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.

package/dist/{b3-contract-DFxcHY0I.mjs → b3-contract-BZIj-LWV.mjs}

@@ -1,4 +1,4 @@
-import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DXXb3Vv3-B0sHZfig.mjs";
+import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DIH4cS6P-YuKZfqTg.mjs";
 import { a as EventDomainError, c as JUDGE_KIND_LOCAL_ENDPOINT, f as validateLocalEndpoint, g as parseIpLiteral, h as assertApprovedAddressSet, l as JUDGE_KIND_TYPESAFE, n as canonicalWebhookTarget, o as JUDGE_KINDS } from "./webhook-target-DyDTwWhV.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { chmod, lstat, mkdir, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
@@ -832,7 +832,7 @@ async function removeTarget(targetId, options = {}) {
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION = "0.17.0";
+const VERSION = "0.18.1";
 //#endregion
 //#region src/mcp/server.ts
 function reply(data) {
@@ -1002,7 +1002,7 @@ async function createEventsMcpServer(options = {}) {
 	return {
 		server,
 		async connectStdio() {
-			const { StdioServerTransport } = await import("./stdio-CD7QQBAh.mjs");
+			const { StdioServerTransport } = await import("./stdio-Dp1EE6ok.mjs");
 			await server.connect(new StdioServerTransport());
 		}
 	};
@@ -2483,4 +2483,4 @@ const B3_CONTROL_CONTRACT = Object.freeze({
 	judgeUnavailable: B3_JUDGE_UNAVAILABLE_VARIANTS
 });
 //#endregion
-export { createRule as $, assertSocketPathFits as $t, normaliseWhatsAppSourceOptions as A, deliveriesList as At, removeTarget as B, ControlFrameReader as Bt, canonicalSseSubscriber as C, assertDoctorReportV1 as Ct, normaliseResendSourceOptions as D, isActivationFailureCode as Dt, normaliseGmailSourceOptions as E, ACTIVATION_FAILURE as Et, canonicalJudgeBudget as F, catalogueShow as Ft, removeSubscriber as G, negotiateVersion as Gt, updateTarget as H, encodeControlFrame as Ht, canonicalJudgeKindEnablement as I, approvalView as It, stop as J, processIsLive as Jt, subscribersList as K, mayRecoverStaleInstance as Kt, judgeKindDefinition as L, EventControlClient as Lt, JUDGE_BUDGET_ID as M, heldList as Mt, JUDGE_KIND_DEFINITIONS as N, retryDelivery as Nt, normaliseSlackSourceOptions as O, disableAll as Ot, canonicalJudge as P, catalogueList as Pt, sourcesList as Q, assertControlSupported as Qt, createEventsMcpServer as R, probeControl as Rt, normaliseActivationDocument as S, enableAll as St, classifySourceOptionChange as T, doctor as Tt, targetTest as U, isControlHello as Ut, targetsList as V, controlFailure as Vt, addSubscriber as W, isControlRequest as Wt, loadSqlite as X, removeInstance as Xt, status as Y, readInstance as Yt, sourceShow as Z, writeInstance as Zt, activationDocumentDigest as _, judgesList as _t, B3_CONTROL_V1_OPERATION_SPECS as a, ensureOwnerOnlyFile as an, updateRule as at, canonicalTarget as b, updateBudget as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, pause as ct, B3_SECRET_TERMINAL_ORIGIN as d, budgetShow as dt, controlEndpoint as en, disableRule as et, isB3ControlOperation as f, disableJudgeKind as ft, isOwnerControlWireOperation as g, judgeTest as gt, OWNER_CONTROL_WIRES as h, judgeModelStatus as ht, B3_CONTROL_ERROR_CODES as i, ensureEventSocketDirectory as in, rulesList as it, APPROVED_TYPESAFE_MODELS as j, dropDelivery as jt, normaliseSourceOptions as k, decideHeld as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, resume as lt, renderB3ApprovalPreviewV1 as m, judgeKindsList as mt, B3_CAPABILITIES as n, verifyPrivateSocketDirectory as nn, removeRule as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, eventPaths as on, ruleTest as ot, isB3SecretOperation as p, enableJudgeKind as pt, updateSubscriber as q, newInstanceRecord as qt, B3_CONTROL_CONTRACT as r, ensureEventPaths as rn, ruleShow as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, installErrorSink as sn, ruleTestRetained as st, B3_APPROVAL_VIEW_VARIANTS as t, verifyControlSocket as tn, enableRule as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, addJudge as ut, canonicalFullRuleDocument as v, removeJudge as vt, sseDeliveryTarget as w, assertDoctorReportV2 as wt, disclosureBindingFor as x, updateJudge as xt, canonicalSubscriber as y, removeJudgeModel as yt, addTarget as z, CONTROL_PROTOCOL_VERSIONS as zt };
+export { sourcesList as $, assertControlSupported as $t, normaliseWhatsAppSourceOptions as A, decideHeld as At, addTarget as B, CONTROL_PROTOCOL_VERSIONS as Bt, canonicalSseSubscriber as C, enableAll as Ct, normaliseResendSourceOptions as D, ACTIVATION_FAILURE as Dt, normaliseGmailSourceOptions as E, doctor as Et, canonicalJudgeBudget as F, catalogueList as Ft, addSubscriber as G, isControlRequest as Gt, targetsList as H, controlFailure as Ht, canonicalJudgeKindEnablement as I, catalogueShow as It, updateSubscriber as J, newInstanceRecord as Jt, removeSubscriber as K, negotiateVersion as Kt, judgeKindDefinition as L, approvalView as Lt, JUDGE_BUDGET_ID as M, dropDelivery as Mt, JUDGE_KIND_DEFINITIONS as N, heldList as Nt, normaliseSlackSourceOptions as O, isActivationFailureCode as Ot, canonicalJudge as P, retryDelivery as Pt, sourceShow as Q, writeInstance as Qt, createEventsMcpServer as R, EventControlClient as Rt, normaliseActivationDocument as S, updateJudge as St, classifySourceOptionChange as T, assertDoctorReportV2 as Tt, updateTarget as U, encodeControlFrame as Ut, removeTarget as V, ControlFrameReader as Vt, targetTest as W, isControlHello as Wt, status as X, readInstance as Xt, stop as Y, processIsLive as Yt, loadSqlite as Z, removeInstance as Zt, activationDocumentDigest as _, judgeTest as _t, B3_CONTROL_V1_OPERATION_SPECS as a, ensureEventSocketDirectory as an, rulesList as at, canonicalTarget as b, removeJudgeModel as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, installErrorSink as cn, ruleTestRetained as ct, B3_SECRET_TERMINAL_ORIGIN as d, addJudge as dt, assertSocketPathFits as en, createRule as et, isB3ControlOperation as f, budgetShow as ft, isOwnerControlWireOperation as g, judgeModelStatus as gt, OWNER_CONTROL_WIRES as h, judgeKindsList as ht, B3_CONTROL_ERROR_CODES as i, ensureEventPaths as in, ruleShow as it, APPROVED_TYPESAFE_MODELS as j, deliveriesList as jt, normaliseSourceOptions as k, disableAll as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, pause as lt, renderB3ApprovalPreviewV1 as m, enableJudgeKind as mt, B3_CAPABILITIES as n, verifyControlSocket as nn, enableRule as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, ensureOwnerOnlyFile as on, updateRule as ot, isB3SecretOperation as p, disableJudgeKind as pt, subscribersList as q, mayRecoverStaleInstance as qt, B3_CONTROL_CONTRACT as r, verifyPrivateSocketDirectory as rn, removeRule as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, eventPaths as sn, ruleTest as st, B3_APPROVAL_VIEW_VARIANTS as t, controlEndpoint as tn, disableRule as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, resume as ut, canonicalFullRuleDocument as v, judgesList as vt, sseDeliveryTarget as w, assertDoctorReportV1 as wt, disclosureBindingFor as x, updateBudget as xt, canonicalSubscriber as y, removeJudge as yt, VERSION as z, probeControl as zt };